Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3e093774-b31a-3ab5-af2b-4c0b5d7d7cb1.roa
File:                     3e093774-b31a-3ab5-af2b-4c0b5d7d7cb1.roa (raw, json)
Hash identifier:          sPkopsz/MleGyZAkvwAPpz24Bv0ho1BIE+hXbHbjFDI=
Subject key identifier:   31:77:06:7C:43:30:29:0A:F0:C0:D6:80:EC:F6:E5:8C:98:AC:CA:5E
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CEBC20F3B884BD2A2FE98BC20
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3e093774-b31a-3ab5-af2b-4c0b5d7d7cb1.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        216.171.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:0f:3b:88:4b:d2:a2:fe:98:bc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=b850672a-65fb-4674-b858-4e0de99ac8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:2b:95:9c:ee:a4:d5:62:5f:10:bb:67:1e:
                    d0:dd:7f:c7:b6:cd:b9:ba:82:02:e8:c9:06:fa:ea:
                    6a:8d:5d:9d:b2:c3:9f:03:b1:fa:c6:bc:ee:fe:73:
                    a8:8c:da:31:cb:32:f6:a4:fc:62:ba:6b:69:04:ae:
                    eb:45:41:ab:e5:1a:cb:6f:2a:0c:08:bd:03:72:a2:
                    a3:64:f2:34:a7:b3:84:8a:0f:42:a2:64:a0:be:e3:
                    99:01:a3:50:b7:fc:75:e2:18:1e:e0:4a:e1:a2:ff:
                    7d:e0:79:84:df:25:f9:d5:0e:ed:53:5f:29:43:2b:
                    4c:e3:6e:95:39:81:12:d0:b5:0c:d1:df:86:f4:41:
                    44:63:26:a5:8e:39:db:e9:b0:38:b6:e9:61:04:c6:
                    8f:10:d7:1a:07:20:62:d1:27:d0:65:69:d7:09:05:
                    62:bb:34:54:d9:0c:f5:1f:54:71:27:0b:8c:23:32:
                    ce:8d:c2:1b:28:7a:8f:96:a9:5f:b6:43:b5:67:ac:
                    a6:0e:46:aa:f4:10:4a:05:51:d1:3c:f9:ce:8c:e1:
                    91:1c:18:3b:ee:f8:4b:6b:c1:b7:b7:c2:ae:10:da:
                    12:fa:3c:02:09:71:8b:b6:34:92:65:08:89:e4:8d:
                    5a:bc:a1:ad:d8:45:e3:ed:92:ea:b1:2a:b6:31:51:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:77:06:7C:43:30:29:0A:F0:C0:D6:80:EC:F6:E5:8C:98:AC:CA:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3e093774-b31a-3ab5-af2b-4c0b5d7d7cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:33:ad:b7:f3:22:0e:3f:87:68:3c:67:7b:dd:b4:0c:2d:15:
         ac:f4:31:ef:f3:f5:4b:fa:c9:87:d7:b1:6f:04:21:0b:6c:5d:
         6d:f8:d4:9f:7b:fb:bf:42:53:f5:04:fb:b4:a2:82:d7:32:db:
         fb:08:dd:bc:7c:f6:44:8d:36:f1:3d:d9:a7:a2:4c:63:fe:d0:
         86:7f:66:ff:05:41:ea:69:43:73:9c:c9:2b:f2:99:da:a0:67:
         ac:14:ea:ff:eb:8b:c8:b0:53:6f:b3:d4:19:3c:63:cb:4e:53:
         c4:56:57:3a:ea:11:05:57:14:82:88:1f:cb:bb:8b:37:33:f0:
         34:d9:25:34:3a:0f:70:06:6c:a5:b6:fc:01:d5:8d:a9:67:87:
         8b:03:76:7c:92:e4:b5:66:7b:c5:c6:03:f7:27:9e:f0:27:93:
         fc:29:05:37:26:da:2f:c2:8b:a3:b8:16:12:38:db:24:d6:28:
         35:a9:52:42:c1:bb:5a:2c:27:61:4b:31:88:3d:57:62:51:81:
         72:cf:3b:48:2a:3e:04:da:77:a6:11:10:73:57:72:3f:9a:82:
         7b:6b:87:d5:7e:90:aa:78:5d:af:0e:53:71:ce:85:51:b9:71:
         71:af:bb:e2:f0:b0:e7:55:f7:8d:38:1f:70:51:de:05:57:e5:
         cd:b9:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:01 2026 by rpki-client